4 ms·
Why would it need to be designed? Email delivery depends on DNS, which is unencrypted and spoofable. Spoofing emails is also doable.
by thanksforfish 6y ago
Why would it need to be designed? Email delivery depends on DNS, which is unencrypted and spoofable. Spoofing emails is also doable.
- loopdoend 6y agoIf the dns lookup on a com1000 domain fails, the email won’t go anywhere.
- thanksforfish 6y agoCorrect. But if a DNS response for that domain is spoofed. It will. DNS is a very old protocol that still has lots of problems and mitigations like DNSSEC are only partially deployed.
- gruez 6y agoEmail is an inherently insecure medium. If an attacker can compromise the DNS responses for your mail server, you're hosed.